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(54) Title of the Invention: 

Method of Checking Data Integrity Using Hash Function 
Abstract: 

The present invention relates to a method of checking the integrity of data using a 
hash function. 

The hash function maps arbitrary-length messages to short and fixed-length 
messages, and is used to check the integrity of data, configure a message-authentication 
code, and augment the efficiency of digital signatures. Configuring an algorithm that 
executes efficiently and has robust encryption characteristics is difficult. The present 
invention proposes performing a message extension that generates an additional 8 message 
words on an input message word, and uses a Boolean function that has robust encryption 
characteristics and a variable message-dependent rotation mechanism in which rotation 
operations in each step are dependent on the input message, thereby configuring an 
efficient hash function with robust encryption characteristics. Accordingly, a hash value that 
corresponds to the data Is calculated when a data file is stored, and is transmitted along with 
the data in order to check the integrity of data; that is. to assure that the data has not been 
changed between creation and reception. 
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(54) Qisg aasi ¥a^ •tp'p^h 

^ 5H4^i^^^e oie^^ ^oj^aoii ^Ef ^61 §a ^ok)1Iah ^eim 

n AfSfElb Ifig^ 121 Smei 5H4H&4=M 0IS^^ a^&lg/aoil 5!01P. 

5H4^I ^01 DIIAIXIS I2§@ S8 ^01^ M^AI3lb IfiSSSI s^gjif Oj| 

AlXl e.lg5!E2| CIXIl AHSSI Sl^ IQil ^^o^ AfS@CK ^HEISOI 4^1 

Oll/H SS^iOIOIOt ^^C^. ^Xll g^S^IH^ e.^£!6H2 sl^l&i SH'M &4^2| =?^B DH¥ OiBIE g^yiOi 
C^. CCfafAH, g ^§8 gJ^ OlIAIXI ^E^^Ei Bn9\ OlIAIXI 9-IES ^^6fb DIIAIXI €f§ri Af 

gefi). g^^^o^ ^mmm e.^^mb e:»ii 2^6.^(>iiah AFggb ^uoi^ e^<i^s 

gjs^ DIIAlXIOll °l^6fb D1IA|X|-£|^ ^EilOliM (Message-dependent Rotation)! AfgefOI 

^9.^ o^^yam si^joi sh^-i^^^i ^^^[ck □ inf sa^ si^ai □ ssoii □^E^ sh^"! 

¥^^1 ^ei^^ 4 2^11. ClIOlEi ^^^£| Xi^AIOll Ef^Oll 6H4H StM 3||<^^SH M^SAH gfi QlOlEi 

oil PI?} ¥1^1 s^ej^^ 4^ 2icf. 



J^3 



E 18 ^ ^SOll CQE §H4^I ^5 ^^E. 

E 2b ^ ^SOll S4^2| ^^E. 

E 4b ^ WSOll CLfe 5H4^! Sl4^0il al^^ ^^ ^^E. 



^ 0H=M&^=M OI§E^ SS^HI ¥1^ ^ei^^SOll ^^^^ m^i 5H^li,^4=2| A 

SEil 01 li^ (Message-Dependent Rotation)! Memoi §H4^lg^4^2| o^^j^l i^^^A!3lb 5t!0|CK 

5H^I ^^4=b ^2|0| ^,Q| bim>::Miil ^0!°| r^J^ij^^ Af^AI5!b 

^61 3 1^1 m^lX Eb DllAIXl QOIXil^^dnessage digest)£f e^Cf. aH4^l ^^8 §2 §e 

°l £I^At XII SXKHI o|Sh §fio| >,g^ ^oj =o| =x-||OII CHSH ¥S^S S^eiSFb 5!°^ DilAIXI eJl 
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qxii ecui ?iafiAH£ Afg^q. ^g^gr 6H4H g^b °£ioiaixi aixi^ 

&::^( pre image resistance)£f Ail^E E£|Oia|X| ai XI second preimage resistance) El^ 
6H0f '^'^m^^^ &4^b gl Uni^(colljsion resistance)! ei^sHOf ^ 

^8 5H^i^^i ^fxib Ai^ ^ gj^(ti)e ^aafb 5!oi M:?ffeenot s^p. " ' 

^H^'l B:HI g,^^ Oie^^ 5114^1 a^4^£f ^jgefj^^l ^^^Q DESU IDEA2f 

^8 1^ 0|g?| S^b ^^£J01 2^b ^^^1 0|g^ ^ SiCfb ^^SO! 

Q. 2g uH^^l. CUS^ei 011^ MD ^11 5Htl 5,^^:7f D\^9\ MD §H4^| s^^b MerkleJIF 

Damgard £| 01^011 xH£l §EHM 1990td01l RivestOil 2\m M04 

b ^;^H 5H^£ioi Qi 01^^ ^^^l5^xl ai:n mds ^ai lh¥ ^^*^oi wssi^iP i995t^ ^gsi 

RIPE ^rirAlgOllAi Xi|Oft[ RIPEMD ^A| o^Et\X\ 5!°^ QAj Olg :'H<:sl^^ RIPEMO- 

128/16001 MO}^ ^^EHOIP. QRoj NISTOilAHb 1993t^0|| SHAS g:?Hl^ ^ QAj 1995^3011 OlS IlH^ySf 

SHA-11 ^sm^n OR se^^ gejsioi siP. iggat^oii haval 5H4H ;;iie^£igicf. □ 

£IOil X•||e.^£l2^XI9.^ 2.'^^^^^ e^^^mPIl ^.^^£lb SH^I RIPEMD-160 

SHA-1, HAVAL MOI SiP. 

^XilOIP. 5H4^I ^^t ^9]9Ji ^01 OilAIXIl I2§9 gf8 ^'0|^ A^^A|5lb S^^^OPI HH^Oij 

8 aH4^|g.^e :>fXlb AH^ PE ¥ iJ^ OilAIXPf ^XH=!P. CCfPAH g,^S5|5|o^ ogg^ gy^i 

b oiai*t gi ^^3mb ^01 m:?f^5Ho^ ^q, e§[ eH4^i oiiaixi eie 3E pxi 

1 AiSUf ^8 Pe-ggOll Sa^£|Oi Afg£|01Xi:?l ttHSOjj H JcHBI ^E:?f la^ot g^p. 

mafA-i. g ^38 5H4»I DIIAIXI 5jgo| e^^^ XiPISf^l ?15H OIIAIXI^^P DilAI 

am. £EII0li^^(rotation)3^^8 DilAIXIOll Sl^mb DilAIXI-oi^ ^E1IOI<M(message*dependent 

rotation)^ Afg^og^j ^^^^Aj^lb §H4^I&^4=1 0|g^^ §^£1 Ail^sfb 

ai □ =?^o! ^[p. 

^5fb ¥1 DilAIXIOil °l^6fb DllAIXhSi^ SEllOliM(messaae-dependent rotation)^ Mg 

mb e^P. 



oim. g^E^i s^ssfoi ^ ^sm^ pebf ^p, 

£ IS ^ ^SOII ttfS 5H4^l g,^4^2i 51x^|^2i ^^EOIH, E 2b ^ ^SOil PE 21^ 9iE0| 



^XH CH¥^°J 6H^I ?l4=b OilAIXI M^Oll CJieH ^^§mb gEHOIP ^ 512 

b|E eo,^ DIIAtXIl zHaimH 160 dlM2| ^iH ^4(5:>|]°l ?-IE a, B. C, D. E)2f 160 dieoj SH^'li^ 
1 :'ftip. ?]Eb 32-b|E B:'I0|P. XH^ eiX-l EJ?^ OilAIXIM 512 bl|^(i6 ?^E) &?|^ 

Mt^cfOI x-ips^p, OilAIXPf i!0|Hl HH4=:>^ £]E^ afX|Q| M^B paddingl 

PaddingB DfXI^^ m^ ^OPf 448ti|E:)f £IE^ Tl PB 'O'M ^:?fs^P □ 

ai:n 64tiiM£i ^en oiiaixi ^oii ^:'fs}p. oiiaixi s^oii chsh ^^4=i 4=iy6fbc-ii 

b 4 BfSE^ 9^9P. nam. ei^ e^4=chiah i6:)H oiiAixi m^oi §p ¥^oii AfgsjE^ 

OIIAIXI M^l ^^E^P. P£fAH SI4^£| 5l| P^Eb % 24e?ll^ ^^£|0i SX^I 96 

B:?II ^a^^P. DilAIXI 16:)H DilAIXI ?-|E:?f ^A^g^ AfS£ISAH W^^}!! ?S£IE^ 

af^p. 

a^4.o| pgEOil ^g£jb DilAIXI ?-|E2| ^AHb OIIAIXI ?^Eb ^f^£f AH^ 8^ 

01 ^OIXIE^ afn. B:^IOilAH S>8 oiiaixi ^E1 AfSmXI a^E^ ^?ll£l2iP. £fSE01IAH2| 95j| 

e^<i^E OfSH \^^^ 113} ^P. 

( \ /A /: ) t A'^ + A. ) \ H - H 

G^ill ^4 (A. B, C. 0. E)^ IVb PeHf ^12 

A=0x67452301. B=0xefcdab89, C=0x96badcfe, 0=0x10325476. E=c3d2e1fO 

2| ejSEEi B:»iioii ^§£ib Kb pe^if ^p. 

K,=0. K2=0x5a827999. K3=0x6ed9eba 1 , K4=0x8f Ibbcdc 

PgEOIIAH A}g£jb Pe°l ¥1 S^^b 0-1 balanced , high nonlinear I Ity, SAC(Strict Avalanche 
Criterion)3l ^Issf^o^ ^^sg °^^s^p. 

fo(Xi. X2.. X3. X4. Xs) = X1X2 ^ X3X4 ^ X2X3X4 ^ X5 



fi(x,. Xa. X3, X4. X5) = X2X3 ^ X4X5 ^ Xi 
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f2(X,, X2, X3, X4, ~ X1X3 X2X5 X3X5 X4 

□ am. sl^M ?15H :)\^^ J\\t^^O\ ¥M f,l 2 £fgE2f 4 ^^SEOilAi A^§^^P. n 

am Bfli sj^L^ollA^ Afgtib ^^oie miAixioji si^afoi cfsxHS 

s=Xi mod32 

0\0\M9\ DilAIXI ?JE Xib Bifll ^S£ib OIIAIXI ?-IE£f OlIAIXI ?-IEO|Cf. 

^11 4^<ii*oitAH s^eiir ^ sin, m^si x-i&aioiie E}m\ nms^ 4=§oiu ^ 
^ ^§8 oisii^ 3^011 5i^3b §1^1 3 seoii Qitf m^^m e^^'9.^m ^^i^oiiah 

^ 4= aiP. EE[ OilAIAI ejg 3E£| ^^Sf CIXIl A-iSAI □ SMM I^^AI^PI ?|5H ^ Afg 

1 

5H^I^^^°l ^fe^OII SiOiAH. gim^jE^ ^^1 &.^^mb ¥M &^4=£f OilAIAtOll Sj^ 

a^b DllAIX|-2|g ^Eil Old (message-dependent rotation)! Afgmb ilg ^SE^ mb aH4^l&^ 4^1 01 



B| BaW 



B.-I — B«« 



i-i 
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<l*l>l padding f 
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Wl^ Bjol 
q!! 94 



A=:he,B^hi,C4;,D^hi,E^h4 



flgsTI 



ho = ho + C,bt = h, + D,hj=lii+E. 
h3 = h3H,ti4 = h4+B 
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